Hi, somewhat related to the question, and just in case anyone is interested, maven can be configured to generate the .asc and .sha512 files for all the build artifacts. At JSPWiki, we overwrite the checksum maven plugin configuration from the ASF parent pom to do this [#1]. When copying the release artifacts to dist.a.o we also copy these files over too, f.ex any subdirectory under [#2]. This makes [#3] a piece of cake :-)
best regards, juan pablo [#1]: https://github.com/apache/jspwiki/blob/master/pom.xml#L610-L626 [#2]: https://dist.apache.org/repos/dist/release/jspwiki [#3]: https://www.apache.org/dev/release-distribution#sigs-and-sums On Thu, Jan 23, 2020 at 9:19 AM Bertrand Delacretaz < bdelacre...@codeconsult.ch> wrote: > On Fri, Jan 17, 2020 at 9:51 PM leerho <lee...@gmail.com> wrote: > > ...either the Maven deploy plugin or the repository always adds > > MD5 and SHA1 signatures as well... > > FWIW, we'd like to stop using MD5 but I don't think we're there yet, > the following URLs have more info: > > http://www.apache.org/dev/release-distribution > https://issues.apache.org/jira/browse/INFRA-14923 > https://issues.sonatype.org/browse/NEXUS-21802 > > -Bertrand > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > >